Enterprise-grade by default.

Access control

Role-based access is enforced at the project, dataset, and task level. Annotators see only the tasks assigned to them; reviewers see the queues they adjudicate; administrators manage membership and policies. Single sign-on and enforced multi-factor authentication are available on Team and managed plans.

Encryption

Data is encrypted in transit using modern TLS and at rest using industry-standard encryption. Customer-managed keys are available for hybrid deployments where data remains in your own storage.

Audit and provenance

Every label, review decision, recommendation, and approval is logged with actor, timestamp, and reason. Audit trails are exportable in machine-readable form and can be attached to model cards and compliance filings.

Data residency and hybrid deployment

Choose the region where your data is processed and stored. For programs with strict residency or confidentiality requirements, a hybrid deployment keeps raw data in your environment while Agentuor manages orchestration, agents, and review workflows.

Privacy in the data itself

Collection pipelines can blur faces and license plates, strip identifying metadata, and apply retention rules at ingest. These transforms are logged like any other operation.

Workforce and vendor controls

Managed-services contributors operate under confidentiality agreements, work inside controlled environments with no local download, and are scoped to specific projects. Access is revoked automatically when a project closes.

Operational security

Infrastructure is monitored continuously, patched on a defined cadence, and backed up across availability zones. Incident response procedures include customer notification within contractually agreed windows.

Responsible disclosure

If you believe you have found a vulnerability, contact security@agentuor.com. We acknowledge reports promptly and work with reporters to resolve issues before public disclosure.